Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
File:                     DmT4G542uEmRd4dnjQFNtL_O8xE.mft (raw, json)
Hash identifier:          oGgZGFukqWxy1H0QtSrmQwVWwMC5snOde7+R6XF69SE=
Subject key identifier:   66:EA:BA:CD:D0:7D:76:6C:DA:5A:1F:89:41:43:D6:73:0F:37:3F:76
Authority key identifier: 0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
Certificate issuer:       /CN=0e64f81b9e36b849917787678d014db4bfcef311
Certificate serial:       01962E999A297D91CE330FB7ABCB62684065
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
Manifest number:          0525
Signing time:             Sun 13 Apr 2025 10:02:20 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:20 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:20 +0000
Files and hashes:         1: 1CUYBHeno8DyBiBJk58s01Vn7kE.roa (hash: Ac/cK8Y5Q3k/sidFyKghklZaDLlcZdtQLnDhxt2bSNo=)
                          2: DmT4G542uEmRd4dnjQFNtL_O8xE.crl (hash: mc5uIcFLkDbUcnEWNXY6yTDeAg8Lm5W82tWbbwP4EPk=)
                          3: GRNi9FaG_cegQglT0i8FIDNWU2U.roa (hash: bCWNDCmq66YbcJ+QlNZxut5x3FKlyihHpYRCb3I31oo=)
                          4: XVq1TrlQkDFo2a7BPxVZPb6kuUE.roa (hash: aTCk4tDEozYvDRrFyrZ3f3BlxhXKcnoh7F4+cF/wfgQ=)
                          5: a543lKmyyGMa0HBPrwfoutV1h7c.roa (hash: LmAVwRAD65X9ZkrQl9CW8/V9eNzAq0UoEpMZCq2ur1o=)
                          6: b-qLuN7LcWCmXzuyYW3S2X2JsvQ.roa (hash: LFWSIiOVLb/1xuV5ZI3+NKtHy2uXnhNazP8T4sdyYgo=)
                          7: jR8-xAGcr5eXfnf9PQ-gCr4sqBU.roa (hash: xAyKDInYSvUkNUl6uz5vwMUk+j1zJC/E+Ymsw/w0qH0=)
                          8: mK6Hd1l33q60MXDCDb-v3OAM0UE.roa (hash: BlNVjbSzLjZletHX6nfFNTrDwvaIRsmo9MnmSGytaUo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:9a:29:7d:91:ce:33:0f:b7:ab:cb:62:68:40:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e64f81b9e36b849917787678d014db4bfcef311
        Validity
            Not Before: Apr 13 10:02:20 2025 GMT
            Not After : Apr 14 10:02:20 2025 GMT
        Subject: CN=66eabacdd07d766cda5a1f894143d6730f373f76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0c:3c:51:00:31:26:a6:5c:1a:51:99:ac:84:
                    37:0e:54:ee:1a:ad:5a:d7:c2:d1:6a:26:dd:6e:58:
                    d2:d5:66:12:b2:03:fb:00:7f:a9:3c:1d:65:de:03:
                    45:21:90:14:45:3a:b6:f8:41:e4:34:db:a5:fa:2e:
                    83:6b:d0:52:01:91:44:02:16:97:b8:11:60:3e:b5:
                    9c:f4:27:26:64:e2:e2:c9:c7:30:c9:bb:ef:54:c1:
                    48:dc:d5:9c:e9:45:ca:d6:57:af:45:f7:06:b1:20:
                    01:92:cc:dc:7f:d1:7c:96:15:75:55:55:4f:2e:cc:
                    02:63:58:29:d7:a4:8e:34:89:d9:48:94:87:6f:03:
                    20:a9:f1:c0:46:8b:6c:4e:a8:f7:22:a9:4e:6a:78:
                    29:fa:54:a4:54:51:c4:04:b8:85:20:c1:e5:31:53:
                    64:23:ef:1c:50:dd:d8:ac:19:91:c5:3f:e0:0e:88:
                    44:ae:64:05:03:ac:83:41:34:53:b2:90:ca:b5:6b:
                    73:5c:c9:8d:5b:74:4b:92:ab:51:b6:cc:94:49:dd:
                    89:65:6c:24:e2:10:71:2f:f6:ff:d7:7d:22:52:36:
                    6f:6e:b8:8a:07:1d:bc:f4:aa:7f:2a:a2:04:65:9c:
                    3f:f7:db:17:5f:42:71:6f:ad:81:6b:f7:66:3f:7c:
                    0c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:EA:BA:CD:D0:7D:76:6C:DA:5A:1F:89:41:43:D6:73:0F:37:3F:76
            X509v3 Authority Key Identifier:
                keyid:0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:a1:5a:bf:73:0f:9a:8d:9a:50:b0:91:54:27:49:13:9d:15:
         4e:50:e1:99:1e:45:83:c0:c1:84:bd:88:d0:6d:40:fc:f1:1a:
         5a:90:c5:06:25:79:72:7c:39:91:2d:e7:d5:dc:2f:5e:c4:3b:
         bd:a8:2f:4c:a7:44:8b:6a:0f:24:91:ad:a1:ff:df:5b:d2:eb:
         d8:97:14:60:2c:5e:9b:54:c6:64:df:0e:36:53:eb:0b:a6:31:
         1b:e8:02:d9:0c:e1:b8:1c:7a:cf:32:f4:73:34:b3:b0:41:4c:
         55:e1:f7:85:c4:d8:41:24:78:0c:3c:c9:3f:a6:f8:2a:ba:e6:
         59:42:89:fa:12:73:ad:86:f0:e8:c9:c7:bf:7e:e0:b1:a3:e0:
         7b:90:ca:0b:43:04:5d:4e:2d:41:b7:92:c1:78:85:2b:af:f6:
         9b:b9:57:6f:7f:ab:a3:a7:fc:c0:b0:bc:b3:67:c4:65:2f:68:
         38:8d:9d:ea:ce:40:75:55:aa:ed:0e:d9:aa:f9:4c:18:38:38:
         e4:d3:7e:9e:c1:8a:91:3a:d1:3b:d1:d5:39:b5:9a:d4:9a:8c:
         92:1b:35:1f:c1:1a:87:df:4d:ef:64:41:c3:17:96:ee:8d:56:
         04:aa:d0:2f:c1:15:c9:28:fc:ed:59:10:5a:be:b5:c3:e0:14:
         b0:cf:8a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----